openid: Fix cross-site scripting.
openid: Fix cross-site scripting.

Can be exploited by a malicious openid provider to execute scripts
on the host using openid.
vivekrajenderan/simplesamlphp,tectronics/simplesamlphp,tectronics/simplesamlphp,tectronics/simplesamlphp,tectronics/simplesamlphp,vivekrajenderan/simplesamlphp,tectronics/simplesamlphp,vivekrajenderan/simplesamlphp,vivekrajenderan/simplesamlphp,vivekrajenderan/simplesamlphp